feat: Implement MongoDB orchestrator storage with registry, commands, and heartbeats

- Added NullAdvisoryObservationEventTransport for handling advisory observation events.
- Created IOrchestratorRegistryStore interface for orchestrator registry operations.
- Implemented MongoOrchestratorRegistryStore for MongoDB interactions with orchestrator data.
- Defined OrchestratorCommandDocument and OrchestratorCommandRecord for command handling.
- Added OrchestratorHeartbeatDocument and OrchestratorHeartbeatRecord for heartbeat tracking.
- Created OrchestratorRegistryDocument and OrchestratorRegistryRecord for registry management.
- Developed tests for orchestrator collections migration and MongoOrchestratorRegistryStore functionality.
- Introduced AirgapImportRequest and AirgapImportValidator for air-gapped VEX bundle imports.
- Added incident mode rules sample JSON for notifier configuration.

src/Concelier/StellaOps.Concelier.WebService/Options/ConcelierOptions.cs

@@ -21,6 +21,8 @@ public sealed class ConcelierOptions
 
     public AdvisoryChunkOptions AdvisoryChunks { get; set; } = new();
 
+    public EvidenceBundleOptions Evidence { get; set; } = new();
+
     public StellaOpsCryptoOptions Crypto { get; } = new();
 
     public sealed class StorageOptions
@@ -172,4 +174,20 @@ public sealed class ConcelierOptions
 
         public int CacheDurationSeconds { get; set; } = 30;
     }
+
+    public sealed class EvidenceBundleOptions
+    {
+        public bool Enabled { get; set; } = true;
+
+        public string Root { get; set; } = System.IO.Path.Combine("out", "evidence", "bundles");
+
+        public string? DefaultManifestFileName { get; set; } = "manifest.json";
+
+        public string? DefaultTransparencyFileName { get; set; } = "transparency.json";
+
+        public string PipelineVersion { get; set; } = "git:unknown";
+
+        [JsonIgnore]
+        public string RootAbsolute { get; internal set; } = string.Empty;
+    }
 }